$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7cd9411c-8a2f-48c5-ba39-9a1571b61bc3.roa File: 7cd9411c-8a2f-48c5-ba39-9a1571b61bc3.roa (raw, json) Hash identifier: Kdevrx1g9GjqnclEFr0drgL5ku2qSWoESgAxcTkh2dY= Subject key identifier: 80:9D:0C:DD:55:3C:6E:E9:D4:B2:C6:7A:F1:81:DC:6A:2F:58:5E:96 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1444FC6AD985D7FF785C78BDD2FDB41CA1DCD3F5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7cd9411c-8a2f-48c5-ba39-9a1571b61bc3.roa Signing time: Mon 22 Sep 2025 18:12:28 +0000 ROA not before: Mon 22 Sep 2025 18:12:28 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:44:fc:6a:d9:85:d7:ff:78:5c:78:bd:d2:fd:b4:1c:a1:dc:d3:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:12:28 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=4b46d3492df42cc3794f8710087c17f6fb1d9cc89e892731a0fb8c97c781db4f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:34:62:fa:5e:aa:db:e0:b9:d3:92:cc:46:8c: 25:11:14:af:5f:2f:ef:22:ec:a3:56:f7:17:d6:f6: 38:75:ca:cf:b5:12:1c:88:70:10:6a:29:7b:58:16: 88:ed:c1:60:1c:6d:79:d7:00:76:51:4d:23:2a:a9: 11:e6:19:d9:d8:74:b6:db:d8:b6:7b:b0:f5:d9:e9: 0e:d6:60:51:5c:82:58:0d:49:c8:45:72:18:88:45: 8b:d6:80:ca:72:13:7e:ad:a2:78:95:9b:25:e4:07: 50:f8:97:86:1f:f9:d7:a9:f6:d1:08:70:a9:be:97: b8:f5:8e:37:62:25:bb:97:23:11:c2:0f:ff:59:88: e2:ec:07:95:bb:7b:0a:86:d1:76:8e:d6:bf:fb:34: 84:a6:1a:cd:eb:15:1a:7d:dd:5f:d2:e8:95:4f:cb: cf:c4:13:d9:ef:46:5e:89:62:e7:18:43:29:0f:ff: d3:5e:b9:39:ad:93:f7:93:63:00:34:3f:b1:27:fa: a1:56:93:1c:97:10:40:a9:15:0c:dd:7e:fa:bb:52: 01:e0:81:a9:4e:1d:36:e3:16:67:e5:31:ae:81:04: 69:ca:04:d1:23:22:22:41:b6:9c:9b:1d:d0:2f:54: 4e:e4:56:fb:ec:97:c8:b6:64:42:24:16:83:6f:4d: a6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9D:0C:DD:55:3C:6E:E9:D4:B2:C6:7A:F1:81:DC:6A:2F:58:5E:96 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7cd9411c-8a2f-48c5-ba39-9a1571b61bc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.133.0/24 Signature Algorithm: sha256WithRSAEncryption 17:a1:fa:23:f1:2c:b6:1e:c2:96:f3:2b:09:3b:e0:36:d2:86: 28:0e:b7:3d:94:b7:6d:e4:59:fc:67:9b:cb:a3:c6:4e:3c:91: 14:b1:7f:60:c7:f7:4f:53:fe:1b:4f:ce:2d:77:cf:5c:e9:27: 88:a0:66:12:cd:b1:c6:15:d5:01:dc:92:93:5d:d4:84:f4:cc: 3e:24:bb:0a:0d:7f:5d:85:73:e9:d0:68:f9:37:ed:12:ee:e7: c3:fe:11:99:96:61:e1:6e:21:86:0b:6e:1a:52:2b:7b:de:67: a9:f1:60:5c:15:6b:77:2c:7e:32:06:0f:c7:4a:00:ad:cf:82: 64:05:7b:88:eb:a4:a4:c3:f4:14:3b:9a:3b:75:51:32:55:f9: 5c:52:52:b9:6d:42:dc:43:dc:4f:c9:c3:e6:79:7b:5c:1f:bd: f6:fc:1b:76:b1:fb:ad:29:ed:8d:87:b6:62:a9:51:f5:29:02: 0f:cf:0a:94:84:25:2e:bb:7c:1f:fd:f8:3d:af:56:01:e3:ad: 9d:b0:2e:ef:36:d6:f4:f6:d8:cb:d1:ca:5a:77:b2:ec:48:e1: 20:27:45:76:61:83:a3:28:07:14:8f:e7:7e:e9:50:3c:94:b9: 64:20:71:e3:0f:1b:d3:63:ba:c1:54:f1:ba:78:d4:cd:29:63: 69:31:ad:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFET8atmF1/94XHi90v20HKHc0/UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTgxMjI4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjQ2ZDM0OTJkZjQyY2MzNzk0Zjg3MTAwODdjMTdmNmZi MWQ5Y2M4OWU4OTI3MzFhMGZiOGM5N2M3ODFkYjRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTNGL6Xqrb4LnTksxGjCURFK9fL+8i7KNW9xfW9jh1ys+1 EhyIcBBqKXtYFojtwWAcbXnXAHZRTSMqqRHmGdnYdLbb2LZ7sPXZ6Q7WYFFcglgN SchFchiIRYvWgMpyE36toniVmyXkB1D4l4Yf+dep9tEIcKm+l7j1jjdiJbuXIxHC D/9ZiOLsB5W7ewqG0XaO1r/7NISmGs3rFRp93V/S6JVPy8/EE9nvRl6JYucYQykP /9NeuTmtk/eTYwA0P7En+qFWkxyXEECpFQzdfvq7UgHggalOHTbjFmflMa6BBGnK BNEjIiJBtpybHdAvVE7kVvvsl8i2ZEIkFoNvTabDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgJ0M3VU8bunUssZ68YHcai9YXpYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdjZDk0MTFjLThhMmYtNDhjNS1iYTM5LTlhMTU3MWI2MWJjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoIUwDQYJKoZIhvcNAQELBQADggEBABeh+iPxLLYewpbzKwk74DbShigO tz2Ut23kWfxnm8ujxk48kRSxf2DH909T/htPzi13z1zpJ4igZhLNscYV1QHckpNd 1IT0zD4kuwoNf12Fc+nQaPk37RLu58P+EZmWYeFuIYYLbhpSK3veZ6nxYFwVa3cs fjIGD8dKAK3PgmQFe4jrpKTD9BQ7mjt1UTJV+VxSUrltQtxD3E/Jw+Z5e1wfvfb8 G3ax+60p7Y2HtmKpUfUpAg/PCpSEJS67fB/9+D2vVgHjrZ2wLu821vT22MvRylp3 suxI4SAnRXZhg6MoBxSP537pUDyUuWQgceMPG9NjusFU8bp41M0pY2kxrcU= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:10 2025 by rpki-client